Industry · August 14, 2026
Hospital Privileges: The Credential That Checks Your Surgeon Against the Actual Operation
A state medical license does not name a single procedure. A board certificate names a specialty, not an operation. Hospital privileges are the one credential in American medicine that says a committee of peers reviewed a specific surgeon's training and outcomes against a specific list of procedures, and then wrote the list down. Almost no cosmetic surgery happens in a hospital, which means almost no cosmetic surgery passes through that review. Here is what privileging actually verifies, why the office setting bypasses it, and the two questions that reveal whether your surgeon has been checked by anyone but themselves.
By The Editorial Desk
13 min read

Patients researching a cosmetic surgeon are told to check board certification, and they should. It is the single most useful filter available, and the reasons why are laid out in what board certification actually certifies. But it is a filter with a specific shape, and it is worth being precise about what falls through it.
Board certification tells you that a physician completed an accredited residency in a defined specialty and passed that specialty's examinations. It does not tell you that anyone has looked at this particular surgeon performing this particular operation and concluded it should continue. There is a credential that does exactly that, and most patients have never heard of it. It is called hospital privileges, and the reason it stays invisible in aesthetics is that the overwhelming majority of cosmetic surgery happens in places that do not grant them.
That is not an argument that office-based surgery is illegitimate. It is an argument that one layer of review that the rest of medicine takes for granted is simply absent from most of this field, and that patients are rarely told which side of the line their surgeon is standing on.
What a hospital privilege actually is, and why it is not a second board certificate
The short answer: hospital privileges are a written, procedure-by-procedure authorization granted by a hospital's medical staff after a committee of peers verifies a physician's training, license, malpractice history, and references, and then reviews their actual performance on a recurring cycle.
The process has two halves that get conflated. Credentialing is the verification step: primary source confirmation of medical school, residency, fellowship, state licensure, board status, malpractice claims history, and peer references, plus a mandatory query to the National Practitioner Data Bank. Privileging is the part that matters more here. It produces a document called a delineation of privileges, which is a list of the specific procedures this physician is authorized to perform in that building. Not a specialty. A list.
The distinction is the whole point. Two surgeons can hold identical board certificates and carry different delineations, because one of them documented training and case experience in a procedure the other never performed. Hospitals write it down this way because the alternative, treating a specialty certificate as a blanket permission slip, is how a competent physician ends up doing an operation they have done four times.
The review does not stop at the door. Under the Joint Commission's standards, a physician granted a new privilege enters a Focused Professional Practice Evaluation, a defined period of closer scrutiny on that specific privilege. Every physician on staff is then subject to Ongoing Professional Practice Evaluation, an at-least-periodic look at performance data that has been mandatory since 2007. Reappointment and re-privileging run on a cycle that the Joint Commission now permits to extend to three years, while the Medicare Conditions of Participation at 42 CFR 482.22 push hospitals toward appraising each member of the medical staff at least every twenty four months. The National Practitioner Data Bank query is required at initial application and every two years thereafter, without exception.
The Data Bank is the enforcement teeth. It was created by the Health Care Quality Improvement Act of 1986, which also gave hospitals legal immunity for conducting peer review in good faith, on the theory that nobody would police their own colleagues without it. Hospitals must report professional review actions that adversely affect a physician's clinical privileges for more than thirty days. They must also report a surrender or restriction of privileges made while under investigation, or in exchange for an investigation not being conducted. That second rule exists because the obvious workaround, resigning quietly before the committee finishes, was the standard way out.
"A board certificate says you finished a residency. A delineation of privileges says a committee of your peers wrote down which operations you are allowed to do in their building, and reviews the list on a clock.
"
The office is where the checking stops, and only some of it gets patched back in
The short answer: state medical licenses are undifferentiated, meaning they authorize the practice of medicine generally and name no procedures at all, so in an office there is frequently no entity between a physician and any operation they decide to offer, and only some accreditation programs and a few state rules reach past the room to close that gap.
This is the fact that surprises people most, and it is not a loophole. It is the structure. A state medical board issues a license to practice medicine. It does not issue a license to perform liposuction, or a rhinoplasty, or a facelift. Specialty training is a professional norm and a legal exposure, not a boundary written into the license. A physician who completed a residency in an unrelated field can lawfully advertise and perform cosmetic operations, and the medical board will generally only become involved after something goes wrong.
In a hospital, that gap gets closed by the privileging committee, which will decline to grant privileges for procedures the applicant cannot document training in. There is no equivalent body in a private office. The surgeon owns the building, employs the staff, sets the case selection criteria, and decides what appears on the menu. The nearest analogue to external review is facility accreditation, which is genuinely valuable and covered in what facility accreditation actually certifies, but accreditation surveys the room. It inspects equipment, sterilization, emergency drugs, staffing, and transfer arrangements. Only some accreditation programs reach past the room to the surgeon.
The same structural gap explains a set of problems this publication has covered separately. It is the mechanism behind the supervision arrangements described in who is actually injecting you, where a medical director's license makes an appointment legal without any operational involvement. It is why the case volume question in how many of these have you done has to be asked directly by the patient rather than looked up. And it is the reason the identity question raised in ghost surgery is answerable in a hospital operating room, where the record names the attending and the assistants, and much harder to answer in a private facility.
Part of the gap does get patched, and it is worth knowing who does the patching, because the credential is already being checked in some settings and simply never disclosed to patients in most others.
QUAD A, the accreditor formerly known as AAAASF and the one most closely associated with plastic surgery office facilities, draws the line explicitly. Its standards require that physicians be certified by a recognized board and hold hospital privileges for the procedures they perform in the accredited facility, and the application requires a copy of each surgeon's delineation of privileges. The operative principle is that only procedures for which acute care hospital privileges are held may be performed in the accredited office. That is the hospital's committee doing work on behalf of an office it will never inspect, and it is a stronger consumer protection than most patients realize they are buying when they see the seal.
Not every accreditor draws it in the same place, which is why "accredited" is a floor rather than a uniform standard, and why the follow-up question is which body accredits the room.
Florida is the useful state example because its office surgery rule is unusually specific. Under the Board of Medicine's standard of care for office surgery, a surgeon performing the highest risk category of office procedure must hold staff privileges to perform that same procedure at a licensed hospital, or document board certification or comparable training and experience to the accrediting organization. If the surgeon does not hold privileges, the physician or the facility must maintain a transfer agreement with a licensed hospital within thirty minutes of transport time. And there is a disclosure clause that deserves to be national: for those procedure levels, the surgeon must give the patient, in writing and before the procedure, the name and location of the hospital where they hold privileges to perform the same operation, or the hospital covered by the transfer agreement.
Read that again as a patient. In one state, you are handed this information on paper without asking. Everywhere else, you get it only if you know the word.
What privileges do not prove, and the honest case for the surgeon who rarely uses them
The short answer: privileges are a meaningful signal and a poor idol, because they are procedure-specific, they can lapse for administrative reasons, and a genuinely excellent aesthetic surgeon may hold them and almost never use them.
Several qualifications matter, and skipping them would make this a worse article.
- Privileges are specific, so the phrase is nearly useless without the procedure attached. A surgeon who holds privileges at a well-known hospital may hold them for reconstructive work and not for the elective operation you are scheduling. "I am on staff at" is a marketing sentence. "I hold privileges for this procedure at" is a factual claim.
- Staff categories differ. Active staff carry admitting responsibilities, call obligations, and minimum activity requirements. Courtesy or affiliate categories carry fewer. A surgeon can be listed in a hospital directory in a category that involves almost no hospital practice.
- Privileges lapse for boring reasons. Hospitals commonly require a minimum number of cases in the building to maintain a privilege, plus call coverage and committee participation. A surgeon whose practice moved entirely into an accredited office may let privileges expire because maintaining them costs time they no longer spend there. That is an administrative event, not a disciplinary one, and it is very common in mature aesthetic practices.
- The best facility for an elective cosmetic case is often not a hospital. An accredited office with a consistent team, controlled scheduling, and no inpatient traffic has real advantages, including infection exposure, and it is a defensible choice by an excellent surgeon. The argument here is not that hospital operating rooms are better. It is that the hospital's review process has no substitute.
The complication at two in the morning
The short answer: privileges determine whether your surgeon can follow you into the hospital, and without them your emergency is managed by a physician who did not perform your operation and has no record of what it looked like from the inside.
Emergency departments are obligated to screen and stabilize anyone who arrives, and they will. That obligation attaches to the hospital, not to your surgeon. If the surgeon who operated on you holds no privileges at the receiving hospital, they cannot admit you, cannot write orders, and cannot take you back to an operating room there. They can visit. That is the extent of it.
The scenarios where this becomes concrete are not exotic. An expanding hematoma after a facelift is a time-sensitive problem with a simple solution in the right hands. A deep infection around an implant is a decision tree about salvage versus removal that turns on details of the pocket and the closure, and the surgeon who created the pocket knows them, as anyone who has read the capsular contracture literature will recognize. A suspected pulmonary embolism, the risk explored in blood clots after plastic surgery, needs an admitting physician immediately. A patient whose comorbidities were a live question during case selection, of the kind discussed in BMI limits in cosmetic surgery and sleep apnea before cosmetic surgery, is exactly the patient most likely to need a bed.
A transfer agreement is a real and adequate answer to this, and it is what the accreditation bodies require precisely because most office surgeons will need it eventually. What it is not is the same thing as continuity of care. It solves the question of where you go. It does not solve the question of who operates on you when you get there. Both answers should exist before you sign anything, alongside the arbitration and confidentiality terms examined in the clause that decides whether you can ever complain.
This is also the quiet structural argument against the itinerary problem described in flying after cosmetic surgery and the economics in what surgical tourism actually costs. Distance and missing privileges are the same failure in different clothing. Both end with a stranger managing your complication.
How to check any of this yourself
The short answer: the state license lookup and the hospital's own physician directory are public and take ten minutes, the National Practitioner Data Bank is not public at all, and the delineation of privileges can only be obtained by asking the surgeon for it.
What you can verify without anyone's cooperation:
- The state medical board license lookup. Every state runs one. It confirms an active license, the issue date, and, critically, public disciplinary actions, consent orders, and practice restrictions. This is the single highest-yield ten minutes in the entire research process and almost nobody spends it.
- Board certification, at the primary source. Verify through the certifying board's own directory rather than the practice website, and confirm which board, because the name of a board is not evidence of its recognition. The distinctions are covered in what board certification actually certifies and the same naming problem appears in what a trademarked procedure name actually certifies.
- The hospital's find-a-doctor directory. If a surgeon claims an affiliation, the hospital usually lists it. An absent listing is worth a question rather than a conclusion, since directories lag.
- The facility accreditation. Ask which body accredits the operating room, and confirm it. QUAD A, AAAHC, the Joint Commission, Medicare certification, and state licensure are the recognized answers.
What you cannot see, and should stop expecting to:
- The National Practitioner Data Bank is closed to the public. Hospitals, licensing boards, and certain other entities may query it. Patients and attorneys may not. There is a de-identified public use file for researchers, which is not useful for checking one person. There is also a self-query, which a physician can run on themselves and hand over, and while no patient is realistically going to obtain one, it is worth knowing that the option exists on the physician's side.
- Peer review proceedings are confidential by statute in most states. The immunity that makes hospital peer review function is the same immunity that keeps its contents sealed.
- Malpractice settlements are frequently invisible. Many settle with confidentiality terms. Some appear in county court records. The absence of findings is not evidence of an absence of claims.
The practical consequence is that the delineation of privileges is not something you can look up. It is something you ask for, in the consultation, alongside the other questions in what a second consultation is for.
The honest summary
Hospital privileges are not a requirement for good cosmetic surgery, and treating them as a pass or fail test would be wrong. Many of the most skilled aesthetic surgeons in the country operate almost entirely in accredited private facilities, for defensible reasons, and some of them have let hospital appointments lapse because maintaining them served no purpose in their actual practice.
What the credential is, precisely, is the only routine mechanism in American medicine by which an outside body examines a specific physician against a specific operation, writes down the answer, and revisits it on a schedule. Board certification checks training once, at the beginning of a career. A state license checks nothing about procedures at any point. Facility accreditation checks the room. Privileging is the only one of the four that checks the match between the surgeon and the operation, repeatedly, using outcome data.
Cosmetic surgery moved into the office for reasons that were mostly good ones, including cost, control, scheduling, and patient experience. It carried the operations with it and left the review process behind, and the field's response has been to lean on board certification to carry a weight it was never built to bear. QUAD A's requirement is the honest workaround, borrowing the hospital's committee to vouch for the office. Florida's disclosure rule is the honest version of the patient conversation, putting the answer in writing before anyone is sedated.
Everywhere else, the burden sits with you, and it is two sentences long. Ask whether your surgeon holds privileges for this operation and where. Ask who admits and treats you if something goes wrong tonight. A practice with good answers gives them immediately, because it has thought about the bad night already. A practice without them will change the subject to the credential it would rather discuss.